← Back

CVE-2021-22555

nvd nist
Published: Jul 7, 2021Modified: Jun 17, 2026CISA KEV

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space

Affected (27)

Netapp
19 products
C400 Firmware
C250 Firmware
H410c Firmware
H300s Firmware
H500s Firmware
H700s Firmware
H410s Firmware
Fas 8300 Firmware
Fas 8700 Firmware
Aff A400 Firmware
Aff A250 Firmware
Aff 500f Firmware
H610c Firmware
H610s Firmware
H615c Firmware
Cloud Backup
Hci Management Node
Solidfire
Solidfire Baseboard Management Controller
Linux
1 product
Linux Kernel
Brocade
1 product
Fabric Operating System
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
C400 Firmware
All versions
Running on/withPlatform Versions
Netapp
C400
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
C250 Firmware
All versions
Running on/withPlatform Versions
Netapp
C250
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H410c Firmware
All versions
Running on/withPlatform Versions
Netapp
H410c
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H300s Firmware
All versions
Running on/withPlatform Versions
Netapp
H300s
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H500s Firmware
All versions
Running on/withPlatform Versions
Netapp
H500s
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H700s Firmware
All versions
Running on/withPlatform Versions
Netapp
H700s
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H410s Firmware
All versions
Running on/withPlatform Versions
Netapp
H410s
All versions
Configuration H
7 vulnerable
Vulnerable SoftwareAffected Versions
Linux
Linux Kernel
From 2.6.19 to 4.4.267
Linux Kernel
From 4.10 to 4.14.231
Linux Kernel
From 4.15 to 4.19.188
Linux Kernel
From 4.20 to 5.4.113
Linux Kernel
From 4.5 to 4.9.267
Linux Kernel
From 5.11 to 5.12
Linux Kernel
From 5.5 to 5.10.31
Configuration I
1 vulnerable
Vulnerable SoftwareAffected Versions
Fabric Operating System
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Fas 8300 Firmware
All versions
Running on/withPlatform Versions
Netapp
Fas 8300
All versions
Configuration K
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Fas 8700 Firmware
All versions
Running on/withPlatform Versions
Netapp
Fas 8700
All versions
Configuration L
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Aff A400 Firmware
All versions
Running on/withPlatform Versions
Netapp
Aff A400
All versions
Configuration M
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Aff A250 Firmware
All versions
Running on/withPlatform Versions
Netapp
Aff A250
All versions
Configuration N
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Aff 500f Firmware
All versions
Running on/withPlatform Versions
Netapp
Aff 500f
All versions
Configuration O
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H610c Firmware
All versions
Running on/withPlatform Versions
Netapp
H610c
All versions
Configuration P
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H610s Firmware
All versions
Running on/withPlatform Versions
Netapp
H610s
All versions
Configuration Q
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H615c Firmware
All versions
Running on/withPlatform Versions
Netapp
H615c
All versions
Configuration R
4 vulnerable
Vulnerable SoftwareAffected Versions
Cloud Backup
All versions
Hci Management Node
All versions
Solidfire
All versions
Solidfire Baseboard Management Controller
All versions

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (19)

Source: cve-coordination@google.com
Third Party AdvisoryVDB Entry
Source: cve-coordination@google.com
ExploitThird Party AdvisoryVDB Entry
Source: cve-coordination@google.com
ExploitThird Party AdvisoryVDB Entry
Source: cve-coordination@google.com
ExploitThird Party AdvisoryVDB Entry
Source: cve-coordination@google.com
ExploitThird Party AdvisoryVDB Entry
Source: cve-coordination@google.com
Mailing ListPatchVendor Advisory
Source: cve-coordination@google.com
Mailing ListPatchVendor Advisory
Source: cve-coordination@google.com
ExploitThird Party Advisory
Source: cve-coordination@google.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

Timeline

No history available yet.